This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 61%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMS%3C/text%3E%3C/svg%3E)
Hello,
I'm trying to create a Runbook (Powershell) to connect to Azure SQL Database and then add an Entra ID user in that database. If there is way to do so in CLI commands it's fine by me. The problem is that we're always stuck at the DB connection step using UMI which is already a db owner in the Azure SQL
Thanks a lot for your support.
Best Regards,
Michel
You can use the below command for Az automation to connect :
Connect-AzAccount -Identity -SubscriptionName $SubscriptionNm
And execute any powershell commands to database directly :
ex:
$Sourcedatabase = Get-AzSqlDatabase -ResourceGroupName $sourceRG -ServerName $sourceServernm -DatabaseName $sourcedbnm
Hello @Nandan Hegde ,
Thank you for your reply, when executing the scripts locally they run well but when executed in a Runbook they don't.
I had to use the below and it worked fine.
# Ensures you do not inherit an AzContext in your runbook
Disable-AzContextAutosave -Scope Process
# Connect to Azure with user-assigned managed identity
$AzureContext = (Connect-AzAccount -Identity -AccountId $umiID).context
# set and store context
$AzureContext = Set-AzContext -SubscriptionName $AzureContext.Subscription -DefaultProfile $AzureContext
Is there any SQL command that add an Entra ID user to an Azure SQL DB?
Thank you,
Is there any SQL command that add an Entra ID user to an Azure SQL DB?
CREATE USER "x@y.z" FROM EXTERNAL may work.
Thank you, is there a way to create the SQL connection inside the runbook?
Thank you, is there a way to create the SQL connection inside the runbook?
I was able to use the below command but it gets stuck and doesn't continue.
$armtoken = ConvertFrom-SecureString ((Get-AzAccessToken -ResourceUrl https://database.windows.net -AsSecureString).Token) -AsPlainText
Plz refer this thread as reference:
Thank you @Nandan Hegde , it worked!!
Glad it helped. Can you please upvote and accept it as answer as it might benefit other community members